|
If you received an order email from us stating
that your order was transactioned as "Fraud",
it is probably because the information you
submitted did not pass our strick fraud protection
standards. Our in-house staff along with
a company called Maxmind determine if your
submitted order/info is possibly legit (or
not). Your sale could still be legit but something array has tipped off our staff
and/or the Maxmind scoring tests. If you
feel your order was deemed as "Fraud"
in error please contact us so we can open back up the order for further
review. We may require more detailed information
like bank contacts and phone numbers, a faxed
or mailed copy (documents like front and
back copies of your drivers license and the
actual card itself). We may also require
a signed release form for the sale, all these
measures are to authenticate your sale as
legit and is for your protection as much
as it is for ours. Here's some fraud issues
you may find of interest....
Stolen Card Fraud
When a card holder loses or has their credit
card stolen, it is possible for the thief
to make unauthorized purchases on that card
up until the card is cancelled. Businesses
that accept credit cards are not permitted
to request supplemental ID from the cardholder,
unless the credit card is not signed. A thief
can potentially purchase thousands of dollars
in merchandise or services before the card
holder or the bank realize that the card
is in the wrong hands. Self serve payment
systems such as gas stations are also highly
prone to accepting a stolen credit card,
as there is no verification of the card holder's
identity.
Credit Card Mail Order Fraud
Using a stolen credit card number, or computer
generated card number, a thief will order
merchandise from a website and have it shipped
to a fake or forwarding address. The thief
then takes the merchandise and disappears
with it. When the real cardholder realized
that they did not make the purchase, they
call their credit card issuer and request
a chargeback. The merchant then loses the
money from the transaction, in addition to
the merchandise that they do not recover.
This is the most common type of credit card
fraud.
Mail Non-Receipt Fraud
Mail non-receipt fraud occurs when a thief
intercepts a replacement card sent to the
legitimate cardholder and uses it. However,
many banks increasingly send out inactive
cards that cannot be used until the legitimate
account holder confirms his or her identity
to the bank using the person's Social Security
number, home address, mother's maiden name,
the number on the card and where the person
got it.
Chargeback Fraud
Chargeback fraud occurs when a legitimate
cardholder pays for a good or service, but
then claims never to have authorized the
transaction, or that the good or service
was never received. This is also known as
first-party fraud.
Skimming
Skimming is the theft of credit card information
by a dishonest employee of a legitimate merchant,
manually copying down numbers, or using a
magnetic stripe reader on a pocket-sized
electronic device. Common scenarios for skimming
are restaurants or bars where the skimmer
has possession of the victim's credit card
out of their immediate view. The skimmer
will typically use a small keypad to unobtrusively
transcribe the 3 or 4 digit Card Security
Code which is not present on the magnetic
stripe. Cards in countries such as the UK
are issued featuring a smart chip with public
key encryption. The chip cannot be copied,
but the card number, expiry date and security
code can be, and this set of data is often
sufficient to use the victim's credit card
account for fraudulent purposes with so-called
"card not present" transactions,
i.e. over the telephone or Internet.
Carding
Carding is a term used by fraudsters for
a process they use to verify that sets of
stolen credit card data are still valid.
The fraudster will present each set of credit
card details in turn on a website that has
real-time transaction processing, making
a purchase for a very small monetary amount
so as not to use up the card's credit limit,
and so as not to attract the attention of
a human reviewer to the transaction. Often,
an online donation site for a charity is
used instead of an eCommerce merchant, since
there is no need to find an item of a suitable
price to put in the virtual shopping cart,
nor to supply shipping details. The carder
may do this manually with a web browser,
or may write automated software to interface
to the website's checkout or billing forms.
In the past, carders used to use computer
programs called "generators" to
produce a sequence of credit card numbers,
and then test them to see which were valid
accounts. However, this process is no longer
viable due to widespread requirement by Internet
credit card processing systems for additional
data such as the billing address, the 3 to
4 digit Card Security Code and/or the card's
expiry date. Nowadays, carding is more typically
used to verify credit card data obtained
directly from the victims by Skimming or
Phishing.
A set of credit card details that has been
verified in this way is known in fraud circles
as a phish. A carder will typically sell
data files of phish to other individuals
who will carry out the actual fraud. Market
price for a phish ranges from US$1.00 to
US$50.00 depending on the type of card, freshness
of the data and credit status of the victim.
|